I've typically run all outgoing traffic (WAN interface) through a hub and sniffed from there.
Otherwise, you could always setup a NAT redirect rule to put all HTTP traffic through a proxy you've
setup and do your monitoring/logging from there.

Tim Nelson
Systems/Network Support
Rockbochs Inc.
(218)727-4332 x105

----- Original Message -----
From: "Paulo Colomes" <pcolomes at gmail dot com>
To: m0n0wall at lists dot m0n0 dot ch
Sent: Friday, July 18, 2008 12:53:30 PM GMT -06:00 US/Canada Central
Subject: [m0n0wall] HTTP Sniffing?

Hello everyone,

does anybody knows if there is a way to sniff HTTP traffic passing through
the m0n0wall? I finally got to install it with 4 network interfaces and now
I want to know if there is a way to show the HTTP connections that my users
are doing.

Before I discovered m0n0wall I used FreeBSD with ipfw and command line, so I
could run "sniffit" to see the HTTP traffic but now it seems I can't.

Thanks in advance

-- 
Paulo Colomés F.
Cel: (09) 84053482
Temuco - Chile.
www.seguridad-informatica.cl